[c-nsp] Recommended code for a Cisco VPN Concentrator 3020

[nick.nauwelaerts at thomson.com]

> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net 
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of William
> Sent: Wednesday, October 03, 2007 09:55
> To: [c-nsp]
> Subject: [c-nsp] Recommended code for a Cisco VPN Concentrator 3020
> 
> We have a VPN 3020 which requires a new revision of code, can anyone
> share what they are running out in production with any issues?
> 
> The box currently runs a couple of site2site VPNS and a handful of
> EzVPN sessions.

It seems our 3020 has been running 4.7.2J for 311 days now. Most
previous 4.7.2 versions have been good as well. The only issue I have is
that crls can be cached until after the expiration time and the
concentrator won't make any additional crl requests until it's cache
expires.

We're using ours for site to site vpns and end users access (coupled
with A/D, radius & certificates), no webvpn.

// nick